Known vulnerabilities in python3-tornado
Vendor:
SUSE
Software:
python3-tornado
Software CPE:
cpe:2.3:o:suse:python3-tornado:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU149939 - Improper Validation of Specified Quantity in Input CVE-2026-82397 |
CWE-1284 | Medium | 4.5.3-150000.3.28.1 | 15.09.2026 |
SB2026091516 SB2026091526 SB2026091527 and 3 more |
||
| #VU149936 - Exposure of sensitive information to an unauthorized actor CVE-2026-49853 |
CWE-200 | Low | 4.2.1-17.21.1, 4.5.3-150000.3.22.1 | 15.09.2026 |
SB2026091514 SB2026091521 SB2026091522 and 4 more |
||
| #VU149935 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-49855 |
CWE-409 | Medium | 4.2.1-17.21.1, 4.5.3-150000.3.22.1 | 15.09.2026 |
SB2026091514 SB2026091521 SB2026091522 and 4 more |
||
| #VU149934 - Buffer over-read CVE-2026-49854 |
CWE-126 | Medium | 4.2.1-17.21.1, 4.5.3-150000.3.22.1 | 15.09.2026 |
SB2026091514 SB2026091521 SB2026091522 and 4 more |
||
| #VU128147 - Resource exhaustion CVE-2026-31958 |
CWE-400 | Medium | 4.2.1-17.18.1, 4.5.3-150000.3.19.1 | 27.04.2026 |
SB20260427102 SB20260427109 SB20260427110 and 40 more |
||
| #VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2025-67724 |
CWE-644 | Low | 4.2.1-17.18.1, 4.5.3-150000.3.16.1 | 12.12.2025 |
SB2025121205 SB2026010587 SB2026010938 and 35 more |
||
| #VU119884 - Excessive Iteration CVE-2025-67725 |
CWE-834 | Low | 4.2.1-17.13.1, 4.2.1-17.18.1 | 12.12.2025 |
SB2025121205 SB2026010587 SB2026010938 and 41 more |
||
| #VU119883 - Excessive Iteration CVE-2025-67726 |
CWE-834 | Medium | 4.2.1-17.13.1 | 12.12.2025 |
SB2025121205 SB2025123045 SB2026010587 and 41 more |
||
| #VU109846 - Allocation of Resources Without Limits or Throttling CVE-2025-47287 |
CWE-770 | Medium | 4.2.1-17.10.1, 4.5.3-150000.3.10.1 | 27.05.2025 |
SB2025052726 SB2025052727 SB2025052728 and 30 more |
||
| #VU76397 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-28370 |
CWE-601 | Medium | 4.2.1-17.7.1, 4.5.3-150000.3.6.1 | 22.05.2023 |
SB2023052204 SB2023061333 SB2023062257 and 28 more |